If you’ve secured Elasticsearch and Kibana, you need to configure the
username and password options in the Elasticsearch output before setting up
and running the module. See
Configure the Elasticsearch output.

Before doing these steps, verify that Elasticsearch and Kibana are running and
that Elasticsearch is ready to receive data from Filebeat.

The setup command loads the recommended index template for
writing to Elasticsearch and deploys the sample dashboards for visualizing the
data in Kibana. This is a one-time setup step.

The -e flag is optional and sends output to standard error instead of syslog.

Run Filebeat:

./filebeat -e

If the module is configured correctly, you’ll see
INFO Harvester started messages for each file specified in the config.

If your logs aren’t in the default location, see
Configure the moduleedit, then run Filebeat after you’ve
configured the module.

Depending on how you’ve installed Filebeat, you might see errors
related to file ownership or permissions when you try to run Filebeat modules.
See Config File Ownership and Permissions
in the Beats Platform Reference if you encounter errors related to file
ownership or permissions.